Log in Start free

Microchip

Products

ProductCVEsExploitedLatest
TimeProvider 41007–Oct 4, 2024
Time Provider 41005–Mar 28, 2026
GridTime 30004–Jun 19, 2026
TimePictra2–Feb 28, 2026
RN48701–Oct 16, 2024
SAM3N1–May 16, 2024
SAM3S1–May 16, 2024
SAM3U1–May 16, 2024
SAM4C1–May 16, 2024
SAM4E1–May 16, 2024
AN10441–Sep 12, 2026
SAM4S1–May 16, 2024
SAMA5D41–Aug 24, 2026
SAME701–May 16, 2024
SAMG551–May 16, 2024
SAMS701–May 16, 2024
SAMV701–May 16, 2024
SAMV711–May 16, 2024
SW3000521–Sep 12, 2026
SAM4N1–May 16, 2024
AN9531–Sep 12, 2026
IStaX1–Apr 16, 2026
MPLAB® Harmony 3 Core Module1–May 28, 2024

Exploited and recent CVEs

  • CVE-2026-89172 Medium 5.6 Side-channel attack of AN1044/AN953/SW300052 cryptographic algorithms 0.2%
  • CVE-2026-89172 Medium 5.6 Side-channel attack of AN1044/AN953/SW300052 cryptographic algorithms 0.2%
  • CVE-2026-89172 Medium 5.6 Side-channel attack of AN1044/AN953/SW300052 cryptographic algorithms 0.2%
  • CVE-2026-18349 High 7.3 SAMA5D44 Fault Injection Vulnerability 0.2%
  • CVE-2026-12620 Medium 4.6 Access Token Exposure in URL Parameters in GridTime™ 3000 GNSS Time Server 0.4%
  • CVE-2026-12621 Medium 5.3 Cross-Site Scripting (XSS) Vulnerability in Password Reset Redirect in GridTime™ 3000 GNSS Time Server 0.2%
  • CVE-2026-12622 Medium 5.3 Open Redirect Vulnerability in Password Reset Submission in GridTime™ 3000 GNSS Time Server 0.2%
  • CVE-2026-12619 Medium 5.1 GridTime™ 3000 GNSS Time Server CSRF to XSS 0.2%
  • CVE-2026-2336 High 8.7 Weak webstax_auth Cookie Authentication Allows Privilege Escalation 0.2%
  • CVE-2025-9497 Critical 9.8 Hardcoded Upgrade Decryption Passwords 0.3%
  • CVE-2026-3010 Critical 9.3 TimePictra Stored Cross-Site Scripting 0.2%
  • CVE-2026-2844 Critical 9.3 TimePictra Authentication Bypass Vulnerability 0.3%
  • CVE-2025-47904 Medium 5.7 Unsigned upgrade package <0.1%
  • CVE-2025-47902 High 7.1 SQL Injection in web resource 0.4%
  • CVE-2025-47901 High 8.9 RCE on restore configuration password 1.4%
  • CVE-2025-47900 High 8.9 RCE on backup configuration password 1.4%
  • CVE-2024-29155 Medium 4.3 Denial of service on Microchip RN4870 devices 0.2%
  • CVE-2024-43683 High 8.7 Improper verification of the Host header in TimeProvider 4100 0.2%
  • CVE-2024-43684 High 8.7 Cross-Site Request Forgery vulnerability in TimeProvider 4100 0.2%
  • CVE-2024-43685 High 8.7 Session token fixation in TimeProvider 4100 0.4%
  • CVE-2024-43686 Medium 5.4 Reflected XSS in TimeProvider 4100 chart component 13.0%
  • CVE-2024-9054 High 8.5 Remote code Execution inTimeProvider® 4100 15.6%
  • CVE-2024-43687 High 7.7 XSS vulnerability in bannerconfig endpoint in TimeProvider 4100 0.8%
  • CVE-2024-7801 Medium 6.3 SQL injection in get_chart_data in TimeProvider 4100 0.8%
  • CVE-2024-30212 High 7.0 Microchip Harmony 3 Core library allows read and write access to RAM via a SCSI READ or WRITE command 0.6%
  • CVE-2024-4760 Medium 6.3 Voltage glitch during startup of the EEFC NVM controller can bypass the security bit 0.2%
  • CVE-2024-4760 Medium 6.3 Voltage glitch during startup of the EEFC NVM controller can bypass the security bit 0.2%
  • CVE-2024-4760 Medium 6.3 Voltage glitch during startup of the EEFC NVM controller can bypass the security bit 0.2%
  • CVE-2024-4760 Medium 6.3 Voltage glitch during startup of the EEFC NVM controller can bypass the security bit 0.2%
  • CVE-2024-4760 Medium 6.3 Voltage glitch during startup of the EEFC NVM controller can bypass the security bit 0.2%